Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/Si2FSBJEu_UytBjwwynWcbhOwIA.roa
File: Si2FSBJEu_UytBjwwynWcbhOwIA.roa (raw, json)
Hash identifier: pJ7A+YNv/9JlcUbDUzxBpzWR2b9ZZIQGWlnX2FTkc3c=
Subject key identifier: 4A:2D:85:48:12:44:BB:F5:32:B4:18:F0:C3:29:D6:71:B8:4E:C0:80
Certificate issuer: /CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
Certificate serial: 03EEA212
Authority key identifier: 4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/Si2FSBJEu_UytBjwwynWcbhOwIA.roa
Signing time: Sat 01 Jan 2022 10:59:44 +0000
ROA not before: Sat 01 Jan 2022 10:59:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50578
IP address blocks: 91.238.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65970706 (0x3eea212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
Validity
Not Before: Jan 1 10:59:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a2d85481244bbf532b418f0c329d671b84ec080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e7:b0:26:30:ae:09:de:16:85:d6:4d:0a:7d:
42:01:b0:f1:95:0d:36:03:33:82:95:bc:e9:93:1a:
8a:94:3c:a7:69:23:5b:7f:35:2f:68:aa:ec:84:90:
f5:aa:43:1f:d5:80:2d:47:27:61:7a:0e:c8:00:0d:
38:84:37:f4:3a:9f:81:b0:c6:be:4d:b5:7c:5f:58:
88:4c:8b:3d:93:e5:69:84:d8:70:97:a7:9f:44:cd:
f5:18:b8:e9:a0:86:d7:89:41:c2:85:9d:0f:34:fb:
7b:e3:99:3d:43:50:8c:38:6f:24:3a:07:aa:c7:b8:
c5:96:74:13:cb:ed:a5:1a:f3:2b:fc:4d:e7:f6:21:
05:5f:05:65:c9:e6:a5:94:f3:d2:ca:b9:b3:30:f7:
ed:12:b1:12:44:4f:17:1d:42:44:59:9e:6a:7d:3d:
2d:4c:b1:92:8e:7f:f6:89:9a:f4:54:b8:92:9f:1a:
67:8c:f1:06:e6:11:6e:9f:51:22:60:31:c7:a4:0d:
ef:a4:a3:c7:4f:9f:54:c7:36:79:b8:a0:b5:1f:5a:
e1:34:eb:65:3d:b6:ee:9d:97:3e:9d:e6:8f:04:29:
bf:90:00:27:e5:6e:af:34:eb:cc:62:d7:31:c3:84:
0d:93:32:8c:18:07:a5:84:79:e2:3b:51:48:43:7a:
94:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2D:85:48:12:44:BB:F5:32:B4:18:F0:C3:29:D6:71:B8:4E:C0:80
X509v3 Authority Key Identifier:
keyid:4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/Si2FSBJEu_UytBjwwynWcbhOwIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.50.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:cd:ea:a6:14:0e:73:ac:b9:5c:f8:a3:33:5e:5d:a2:c6:27:
c2:b3:59:71:32:85:62:e6:9c:36:ca:48:5e:31:fd:58:c4:cf:
d8:e9:7f:aa:19:21:55:c9:45:95:73:7d:d9:14:75:11:cf:0c:
30:19:c7:d9:e3:99:5d:02:75:64:ab:5d:44:1e:37:d6:60:cc:
07:af:3f:46:08:e6:cb:3b:5d:31:29:8c:92:1c:cc:eb:09:96:
f6:43:77:66:24:d4:d4:6b:95:e4:f9:cc:8a:8e:5e:9d:fa:de:
f2:9a:5b:4e:5b:b6:38:0e:3b:7e:8c:13:4d:d0:ee:76:58:5b:
6c:7d:62:62:f1:99:63:fc:87:fd:c5:49:29:90:f6:85:ae:19:
0a:ad:6b:12:b2:49:36:3d:cb:31:fd:44:45:d4:87:c4:7d:d9:
f1:ce:ed:d0:87:5d:64:71:dd:e7:4e:21:e2:fc:ba:14:8e:f0:
f2:f5:6d:33:99:29:d7:a1:67:d5:34:a2:ad:a0:b4:08:15:7b:
82:52:55:74:73:c8:e4:fe:a8:f5:87:55:57:47:d7:8d:a6:16:
6b:8f:c6:e7:d6:53:f8:77:09:b0:a5:f0:96:2f:e0:d1:52:10:
58:a3:e7:cb:fa:e4:e0:74:5f:9f:db:b4:70:8f:47:90:5f:08:
92:41:1b:7a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA+6iEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZGI5NTJlZDFjZDdhMzgwM2NmNGRiZmQzNDBlYTc0OTYzMjY4YmEwMB4XDTIyMDEw
MTEwNTk0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGEyZDg1NDgxMjQ0
YmJmNTMyYjQxOGYwYzMyOWQ2NzFiODRlYzA4MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJDnsCYwrgneFoXWTQp9QgGw8ZUNNgMzgpW86ZMaipQ8p2kj
W381L2iq7ISQ9apDH9WALUcnYXoOyAANOIQ39DqfgbDGvk21fF9YiEyLPZPlaYTY
cJenn0TN9Ri46aCG14lBwoWdDzT7e+OZPUNQjDhvJDoHqse4xZZ0E8vtpRrzK/xN
5/YhBV8FZcnmpZTz0sq5szD37RKxEkRPFx1CRFmean09LUyxko5/9oma9FS4kp8a
Z4zxBuYRbp9RImAxx6QN76Sjx0+fVMc2ebigtR9a4TTrZT227p2XPp3mjwQpv5AA
J+VurzTrzGLXMcOEDZMyjBgHpYR54jtRSEN6lD8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRKLYVIEkS79TK0GPDDKdZxuE7AgDAfBgNVHSMEGDAWgBRNuVLtHNejgDz0
2/00DqdJYyaLoDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RibFM3UnpYbzRBODlOdjlOQTZuU1dNbWk2QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTAvYzRmMmUyLTAxODgtNGE0My04NTAzLWQyNjAxY2MxMjM3Ny8x
L1NpMkZTQkpFdV9VeXRCand3eW5XY2JoT3dJQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAv
YzRmMmUyLTAxODgtNGE0My04NTAzLWQyNjAxY2MxMjM3Ny8xL1RibFM3UnpYbzRB
ODlOdjlOQTZuU1dNbWk2QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvuMjANBgkqhkiG9w0BAQsFAAOC
AQEAi83qphQOc6y5XPijM15dosYnwrNZcTKFYuacNspIXjH9WMTP2Ol/qhkhVclF
lXN92RR1Ec8MMBnH2eOZXQJ1ZKtdRB431mDMB68/RgjmyztdMSmMkhzM6wmW9kN3
ZiTU1GuV5PnMio5enfre8ppbTlu2OA47fowTTdDudlhbbH1iYvGZY/yH/cVJKZD2
ha4ZCq1rErJJNj3LMf1ERdSHxH3Z8c7t0IddZHHd504h4vy6FI7w8vVtM5kp16Fn
1TSiraC0CBV7glJVdHPI5P6o9YdVV0fXjaYWa4/G59ZT+HcJsKXwli/g0VIQWKPn
y/rk4HRfn9u0cI9HkF8IkkEbeg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:31 2024 by rpki-client on console-fra.rpki-client.org